Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: 9wCMdX23ptGzfaa3qqkpec9LrQYsoyO+I6QoY2HqHI0=
Subject key identifier: 1C:37:F7:E0:5E:2D:2F:9B:EC:55:8F:C1:1B:C5:0B:CB:D7:2A:06:8A
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 0198C9499766394603D6AED800A2BE14BB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 03F8
Signing time: Wed 20 Aug 2025 21:01:39 +0000
Manifest this update: Wed 20 Aug 2025 21:01:39 +0000
Manifest next update: Thu 21 Aug 2025 21:01:39 +0000
Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: PgUYjzJzQFIFGJr0cRDez53MhP0aAmcssNaix23wgTo=)
2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:49:97:66:39:46:03:d6:ae:d8:00:a2:be:14:bb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Aug 20 21:01:39 2025 GMT
Not After : Aug 21 21:01:39 2025 GMT
Subject: CN=1c37f7e05e2d2f9bec558fc11bc50bcbd72a068a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:3d:14:1b:d4:b7:10:17:e0:e3:11:6c:72:
6a:67:fc:fe:04:24:37:43:a4:1f:de:62:33:a5:b8:
a2:7f:55:32:8d:50:87:ce:bf:88:0e:aa:15:61:d6:
cd:d8:33:aa:7a:f3:7f:ab:9d:e0:aa:19:77:0f:2c:
5a:73:03:5c:e7:8a:f2:34:03:58:69:9f:59:ae:9d:
b0:aa:d0:78:85:ad:af:79:8f:9b:8d:d2:a1:d8:02:
74:7f:34:08:9e:f1:42:6c:92:a6:86:4b:6a:7d:c4:
e2:af:2c:dc:d2:0e:17:78:6d:19:7d:37:3a:fd:4b:
7c:a8:0d:0f:97:aa:cc:6e:a8:90:2f:67:b9:10:09:
52:5e:07:8c:72:86:3e:60:ce:0b:44:29:49:be:06:
f6:6a:2e:8a:62:da:2d:fa:40:2d:73:2c:3d:00:d1:
21:f1:04:85:03:55:46:25:a1:3b:83:ff:fe:95:46:
81:b8:ce:49:f1:b4:bf:44:6a:aa:53:90:f2:fe:e1:
33:f0:bb:df:89:ac:92:ff:f0:12:11:1c:e6:31:cb:
c7:97:65:59:69:e6:03:3c:ce:ee:1b:fc:9b:29:f7:
c0:b0:dd:20:dc:13:1b:a3:66:d0:bd:dc:7e:7f:18:
1d:67:1e:38:6a:1c:10:83:58:32:66:c9:4e:8e:9f:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:37:F7:E0:5E:2D:2F:9B:EC:55:8F:C1:1B:C5:0B:CB:D7:2A:06:8A
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:53:f9:23:09:6d:c6:6b:94:65:28:a4:62:47:2c:e6:e3:
ea:09:c9:a2:6b:94:e1:68:41:86:ea:8c:3b:4c:bc:bb:7e:7e:
9b:30:4c:2f:d9:c2:7b:51:4d:b2:50:e7:b3:e5:a4:08:59:66:
a8:28:e4:84:07:ff:5d:4b:1d:4d:29:b9:90:2f:0b:c7:95:88:
57:a7:39:d0:72:c3:fd:a9:be:52:e8:37:7d:41:35:a4:f0:71:
2b:88:24:35:18:73:33:82:4f:ac:1e:c1:91:5e:04:b9:64:0c:
81:ed:47:82:e6:59:ad:f8:ff:c1:5f:dc:d2:a2:c0:5b:b1:42:
dd:bf:a7:9c:24:79:ae:f7:85:ab:12:22:d3:8b:3c:c9:c6:03:
b4:7f:fb:ad:b9:3a:76:fa:09:31:61:1a:4d:b6:6e:d6:2a:37:
41:41:63:37:5c:99:19:93:15:ae:11:58:bb:73:f7:ca:83:2e:
12:c0:d8:42:f6:52:d1:07:19:0a:cb:ee:2a:60:ab:88:0d:53:
1c:24:f3:98:38:3b:9d:7a:12:8f:21:92:a6:ff:57:f6:5e:a6:
aa:46:6c:63:ec:0c:a0:d8:d7:80:44:56:38:7b:f1:a6:36:9e:
4c:c1:62:21:d6:83:fb:95:a9:5e:6d:7c:fd:ca:2c:fd:6f:5a:
48:d6:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:55:18 2025 by rpki-client